Introduction

Welcome to Lucía Ballesteros' portfolio website. Your privacy is important to us, and this policy explains how we handle any information collected from visitors.

This website is hosted by the IT service provider commissioned by us:

DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich (hereinafter DomainFactory). When you visit our website, DomainFactory collects various log files including your IP addresses.

Details can be found in the privacy policy of DomainFactory: https://www.df.eu/de/datenschutz/.

Please read this privacy policy carefully before using this website, as it explains how we process personal data. By using this website, you agree to this statement.

1. Data protection at a glance

The operators of these pages take the protection of your personal data very seriously. We treat your personal data, i.e. data that can identify an individual or identify it by appropriate measures, confidentially and in accordance with the statutory data protection regulations as described in this privacy policy.

1.1 How do we process your data?

When you use this website, different types of data are collected.

The first category includes non-identifying and non-identifiable user data provided or collected through the use of the website ("Non-personal data"). We do not know the identity of the user from whom non-personal data was collected. The non-personal data that may be collected includes aggregated usage data and technical data transmitted by your device, including certain information regarding software and hardware (e.g. B. browser used on the device and operating system used, language setting, access time, etc.). Based on this data, we improve the functionality of our website. We may also collect data about your activity on the website (e.g. B. accessed pages, surfing behavior, clicks, actions, etc.)

The second category includes personal data, i.e. data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. She also explains how and for what purpose this is done.

The protection of your privacy is important to us. We collect and process various types of personal data through this website. These include:

Device data: We collect personal data from your device. Such data includes geolocation data, IP address, unique identifiers (e.g. B. MAC address and UUID) as well as other data resulting from your activity on the website.
Information that you provide to us when using our website, such as name, address, e-mail address, telephone number that you enter in a contact form
Information collected with cookies

1.2 Legal basis of data processing on this website

If you have consented to the data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special data categories are processed in accordance with Art. 9 para. 1 GDPR. In the case of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR.

If you are interested in the storage of cookies or access to information in your device (e.g. B. via device fingerprinting), the data processing is additionally carried out on the basis of § 25 para. 1 TTDSG. The consent can be revoked at any time.

If your data is necessary for the fulfillment of the contract or for the implementation of pre-contractual measures, (such as when using the contact form or for inquiries by e-mail or telephone, we process your data on the basis of Art. 6 para. 1 lit. b DSGVO. Furthermore, we process your data if they are necessary to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.

Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The following paragraphs of this data protection declaration provide information on the legal bases relevant to each individual case.

1.3 Storage period

We store your personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes and enforce our policies. The retention periods depend on the type of data collected and the purpose for which this data was collected, taking into account both the case-specific circumstances and the need to delete outdated, unused information as soon as possible. We store records with personal data of customers, documents about the account setup, communications and other data in accordance with applicable laws and regulations.

We may at any time and in our sole discretion correct, complete or remove incomplete or incorrect data.

1.4 Recipients of personal data

In principle, we only pass on personal data to external bodies if this is helpful or appropriate in order to:

a. to comply with applicable laws, regulations, court proceedings or official requests;

b. enforce our policies (including our agreement) and, if necessary, investigate any possible violations in this regard;

c. to investigate, detect, prevent or take action against illegal activities or other misconduct, suspected fraud or security problems;

d. to assert or enforce our own legal claims or to defend ourselves against the claims of others;

e. to protect the rights, property or our safety, the safety of our users, your safety or the safety of third parties; or to

f. to cooperate with law enforcement authorities and/or to protect intellectual property or other legal claims.

2. your rights

As a data subject, you have the right to information, the right to rectification, the right to erasure (right to be forgotten), the right to restriction of processing, the right to data portability and the right to object to the processing of personal data concerning you based on Article 6 (1) e) or f) GDPR or if the personal data are processed for direct marketing purposes in accordance with applicable law.

Please note that your above rights are restricted by law and may only have to be fulfilled by us under certain conditions.

To exercise your rights, please contact the body responsible for this website by e-mail: hello@luciaballesteros.de

2.1 Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already given consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

2.2 Right of appeal to the competent supervisory authority

To exercise your right of appeal (Art. 77 GDPR), please contact the competent supervisory authority.

2.3 How do we protect your data?

In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. B. SSL) via HTTPS.

We would like to point out that the data transmission on the Internet (e.g. B. when communicating by e-mail) may have security gaps. A complete protection of the data against access by third parties is not possible.

3. Cookies

We and our trusted partners use cookies and other technologies in our related services, including when you visit our website or when you access our services.

A "cookie" is a small file unit that assigns a website to your device while you access it. Cookies are very useful and can be used for different purposes. This includes the problem-free page navigation, a possible automatic activation of certain functions, the storage of your settings as well as a quick and easy interaction between you and our services. Cookies are also used to show you relevant advertisements of interest to you and to compile statistics about your use of our services.

The following types of cookies are used on the website:

a. "Session cookies" are only used temporarily during a browser session to enable normal system use. These cookies are deleted from your device as soon as the browser is closed.

b. "Persistent cookies" are only read by the website, stored on your computer for a specified period of time and are not deleted when the browser is closed. Such cookies are used so that we can recognize you on a repeated visit. This allows us, for example, to save your settings for the next login.

c. "Third-party cookies" are placed by other online services that execute content on the displayed page, for example by external analysis companies that monitor and analyze access to our website.

Cookies do not contain any data that can be used to identify you. Personal data that we store about you may be linked by us to the data stored in cookies and retrieved by cookies. Information on how to remove these cookies can be found in the instructions in the device settings. Please note that by disabling cookies, some functions of our website may no longer function properly and may limit your online experience.

We also use the "Google Analytics" tool to collect data about your use of the website. Google Analytics records, for example, how often the website is accessed, which pages are accessed during a visit, etc. We only use Google Analytics data to improve our website and services. Google Analytics collects the IP address assigned to you on the day you visit the website and not your name or other identifiable data. We do not combine the collected Google Analytics data with personal data. Google's possibilities to use and release the data collected by Google Analytics about your visits to this website are subject to the Google Analytics Terms of Service and Google's Privacy Policy.

4. Collection of data by third parties

This policy only covers the use and disclosure of data that we collect from you. If you publish data on other websites or disclose it to third parties on the Internet, other provisions may apply. Therefore, always read the general terms and conditions and data protection regulations carefully when you disclose data.

This privacy policy does not apply to business practices of companies that are not owned or controlled by us, or by persons other than our employees and employees, including third parties to whom we disclose this information as described in this Privacy Policy.

5. Transmission of data outside the European Economic Area

Note that some recipients may not be based in the European Economic Area. If this is the case, we will only transfer your data to countries approved by the European Commission with an adequate level of data protection or to ensure an adequate level of data protection through a legal agreement.

6. Social media and tools

Elements of social media are used on this website (e.g. B. Facebook, Instagram). You can usually recognize the social media elements by the respective social media logos.

As soon as you click on the social media element, the respective provider receives the information that you have visited this website with your IP address. If you are at the same time in your respective social media account (e.g. B. Facebook), the respective provider can assign the visit to this website to your user account. The use of the plugin constitutes consent within the meaning of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. You can revoke this consent at any time with effect for the future. The service is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

6.1 Instagram

Functions of the Instagram service are integrated on this website. These features are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When you click on the social media element, a direct connection is established between your device and the Instagram server. Instagram receives information about your visit to this website. If you are logged in to your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to assign the visit to this website to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be revoked at any time.

Insofar as personal data is collected on our website with the help of the tool described here and send to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The processing carried out after the forwarding by Facebook or Instagram is not part of the joint responsibility. The joint obligations incumbent on us were laid down in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are in favor of providing data protection information when using the Facebook or Instagram tools and responsible for the data protection-safe implementation of the tool on our website. For the data security of Facebook or Instagram products is responsible for Facebook. Rights of affected persons (e.g. B. Request for information) with regard to the on Facebook or You can claim Instagram processed data directly from Facebook. If you assert the rights of the data subject with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum?paipv=0&eav=AfZ7dL-v8T1A9px2eIS8V--6cKQLzK2tJvebtXuzQSrZm5zyAc0tIWNIwvOuMToHCMc&_rdr

https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

Further information can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/.

The company is certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified according to the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail? contact=true&id=a2zt0000000GnywAAC&status=Active

6.2 Google Analytics

We use Google Analytics on our website. This is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Usage and user-related information, such as IP address, place, time or frequency of the visit to our website are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google already shortens the IP address within the EU or the EEA.

The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website as well as of the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

Google indicates that it does not connect your IP address with other data. In addition, Google provides further data protection information for you at https://policies.google.com/technologies/partner-sites?hl=en-US, such as the possibilities to prevent the use of data.

In addition, Google offers at https://tools.google.com/dlpage/gaoptout? hl=en a so-called deactivation add-on along with further information about it. This add-on can be installed with the common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about visiting our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. Of course, you can also find out whether and which other web analysis services are used by us in this privacy policy.

7. Updates or changes to this privacy policy

We reserve the right to change or review this privacy policy from time to time. You will find the date of the current version at the end of this statement. Your continued use of the platform after the announcement of such changes on our website constitutes your consent to such changes to the privacy policy and shall be deemed to be your agreement to the binding of the amended provisions.

Status: July 2024